97 matches found
CVE-2021-3912
CVE-2021-3912 affects OctoRPKI: it loads an entire repository into memory and can unzip a gzip bomb in memory, enabling resource exhaustion and a crash. The vulnerability is described consistently across multiple feeds as a memory/CPU exhaustion issue triggered by oversized input or crafted archi...
CVE-2021-3912
OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible to create a repository that makes OctoRPKI run out of memory and thus crash...
CVE-2008-3912 affecting package clamav 0.101.2-3
CVE-2008-3912 affecting package clamav 0.101.2-3. An upgraded version of the package is available that resolves this issue...
CVE-2020-3912
CVE-2020-3912 is a macOS Catalina Bluetooth out-of-bounds read vulnerability addressed by improved input validation. Affected: macOS Catalina versions prior to 10.15.4 (Bluetooth component). Root cause: an out-of-bounds read due to improper input handling. Impact (as stated): local attacker could...
CVE-2020-3912
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...
macOS 10.15.x < 10.15.4 / 10.14.x < 10.14.6 Security Update 2020-002 / 10.13.x < 10.13.6 Security Update 2020-002
The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6 Security Update 2020-002, 10.14.x prior to 10.14.6 Security Update 2020-002, or 10.15.x prior to 10.15.4. It is, therefore, affected by multiple vulnerabilities : - Insufficient control flow in certain data...
Ubuntu 16.04 LTS : GDK-PixBuf vulnerability (USN-3912-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3912-1 advisory. It was discovered that the GDK-PixBuf library did not properly handle certain BMP images. If an user or automated system were tricked into opening a specially...
CVE-2019-3912
An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /r1/ returnURL parameter allows an unauthenticated remote attacker to redirect users to arbitrary web sites...
CVE-2019-3912
CVE-2019-3912 affects LabKey Server Community Edition prior to 18.3.0-61806.763. The Open Redirect vulnerability is triggered via the /__r1/ returnURL parameter, allowing an unauthenticated remote attacker to redirect users to arbitrary external sites. The NUCLEI template and NVD entry confirm th...
CVE-2017-3912
creationtimestamp| type| source ---|---|--- 2018-09-19 02:33:14+00:00| seen| https://t.me/cibsecurity/272...
CVE-2017-3912
Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...
CVE-2017-3912
The vulnerability CVE-2017-3912 affects McAfee Application and Change Control (MACC) versions 6.2.0 and 7.0.1. A local attacker can bypass password authentication in the software’s password management feature and, via a command-line utility, execute arbitrary commands on the affected system. The ...
CVE-2017-3912 McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass
Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...
CVE-2018-3912
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of its SQLite database, leading to a buffer overflow on the stack. The strcpy call overflows the destination buffer, which has a size of 128...
CVE-2018-3912
CVE-2018-3912 affects Samsung SmartThings Hub STH-ETH-250 firmware 0.20.17. The video-core HTTP server copies database fields from shard into a stack-allocated structure using strcpy without length checks, enabling stack-based buffer overflows (secretKey, plus other fields with varying sizes). An...
Debian: Security Advisory (DSA-3912-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-3912
Technical details about CVE-2016-3912 are not publicly provided in the supplied connected documents. The material confirms a privilege-escalation issue in Android framework APIs but lacks specific affected versions, exploit details, or patches. Monitor for updates.
CVE-2015-3912
CVE-2015-3912 affects Huawei E355s Mobile WiFi (firmware < 22.158.45.02.625 and WEBUI
Security Advisory-Information Disclosure Vulnerability on E355s Mobile WiFi
E355s have an information disclosure vulnerability that could be exploited by an attacker to graft attack commands or capture network communications to obtain the configuration and user information without login Vulnerability ID: HWPSIRT-2015-02002. This Vulnerability has been assigned Common...
openSUSE Security Update : v8 / chromium (openSUSE-2011-93)
Chromium update to to 18.0.972 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-93. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...